summaryrefslogtreecommitdiff
path: root/cmd/certutil
diff options
context:
space:
mode:
authorDaiki Ueno <dueno@redhat.com>2017-10-27 11:11:31 +0200
committerDaiki Ueno <dueno@redhat.com>2017-10-27 11:11:31 +0200
commit4f0df27cda3dade418c236441a7bad3551718be5 (patch)
tree107488ba5e24e9fc3a136ecb18fa24b47bcbdde3 /cmd/certutil
parentf99f128cccb4e9f8f3eccf1d2283b1b6651f3f1d (diff)
downloadnss-hg-4f0df27cda3dade418c236441a7bad3551718be5.tar.gz
Bug 1341302, certutil: document RSA-PSS options, r=hkario, r=kaie
Diffstat (limited to 'cmd/certutil')
-rw-r--r--cmd/certutil/certutil.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/cmd/certutil/certutil.c b/cmd/certutil/certutil.c
index b56724db4..5f637e11c 100644
--- a/cmd/certutil/certutil.c
+++ b/cmd/certutil/certutil.c
@@ -1217,6 +1217,8 @@ luC(enum usage_level ul, const char *command)
" -o output-cert");
FPS "%-20s Self sign\n",
" -x");
+ FPS "%-20s Sign the certificate with RSA-PSS (the issuer key must be rsa)\n",
+ " --pss-sign");
FPS "%-20s Cert serial number\n",
" -m serial-number");
FPS "%-20s Time Warp\n",
@@ -1550,6 +1552,8 @@ luR(enum usage_level ul, const char *command)
" -h token-name");
FPS "%-20s Key size in bits, RSA keys only (min %d, max %d, default %d)\n",
" -g key-size", MIN_KEY_BITS, MAX_KEY_BITS, DEFAULT_KEY_BITS);
+ FPS "%-20s Create a certificate request restricted to RSA-PSS (rsa only)\n",
+ " --pss");
FPS "%-20s Name of file containing PQG parameters (dsa only)\n",
" -q pqgfile");
FPS "%-20s Elliptic curve name (ec only)\n",
@@ -1727,6 +1731,8 @@ luS(enum usage_level ul, const char *command)
" -h token-name");
FPS "%-20s Key size in bits, RSA keys only (min %d, max %d, default %d)\n",
" -g key-size", MIN_KEY_BITS, MAX_KEY_BITS, DEFAULT_KEY_BITS);
+ FPS "%-20s Create a certificate restricted to RSA-PSS (rsa only)\n",
+ " --pss");
FPS "%-20s Name of file containing PQG parameters (dsa only)\n",
" -q pqgfile");
FPS "%-20s Elliptic curve name (ec only)\n",
@@ -1735,6 +1741,8 @@ luS(enum usage_level ul, const char *command)
"");
FPS "%-20s Self sign\n",
" -x");
+ FPS "%-20s Sign the certificate with RSA-PSS (the issuer key must be rsa)\n",
+ " --pss-sign");
FPS "%-20s Cert serial number\n",
" -m serial-number");
FPS "%-20s Time Warp\n",